Keycloak Authentication Provider implementation to get a 2nd-factor authentication with a OTP/code/token send via SMS (through AWS SNS). Demo purposes only!

A Keycloak authenticator to restrict authorization on clients

Keycloak: Home IdP Discovery - discover home identity provider or realm by email domain

Simple in-memory User Storage Provider SPI implementation for Keycloak. Demo purposes only!

A Keycloak provider which permits authenticate a user with a code sent on SMS

Argon2 Password Hash Provider for Keycloak

A Keycloak provider that posts events to a URL via HTTP POST as JSON

Drop-in Email Provider SPI replacement for Keycloak to send emails via AWS Simple Email Service (SES). Demo purposes only

This project extends the Keycloak authentication server to cover complicated enterprise use cases such as multi-tenancy, custom storage, n-level resellers by extending Keycloak through its SPIs such as storage, authentication, and identity provider.

Keycloak event listener provider implementation to send events either to a HTTP REST endpoint or to a JMS topic

This code extends Keycloak for the provisioning of 2 Factor Authentication (2FA) through non-interactve API methods ✨ Project extends Keycloak with a custom RealmResourceProvider. This allows for 2FA via REST calls. Used in DO119 to secure $PRGC token transactions.

a Keycloak broker mapper that maps a multivalued OIDC claim (e.g.: groups) or SAML attribute (e.g.: groupMembership) into one or more realm and/or client role assignments based on regular expressions

a Keycloak browser authenticator that enforces an impersonation policy restricting impersonators from accessing service providers (clients) unless holding an associated client role

HaveIBeenPwned Password Policy for Keycloak PoC

A Keycloak Event Listener that logs errors or all events to Sentry

A Service provider to consume keycloak API and provides authorization with laravel/lumen

SAML authentication implementation with Keycloak for IdP and SP integration.

Keycloak plugin for logins using phone number

A Keycloak plugin to authenticate users using a link sent via email

A Keycloak provider that enables encryption of user attributes that contain PII data to be automatically encrypted upon storing to database and then decrypted upon loading from database